Data protection information

 

Data protection information

With the following data protection information, we would like to explain which personal data we process when you visit our website. We would like to point out that, by default, all data transfers in connection with our website are made via an encrypted connection. We reserve the right to modify our data protection information from time to time so that it always corresponds to the current legal requirements or reflects the changes in our services. We therefore recommend that you read the data protection information regularly to get the latest information on the protection of the personal data we process.

Data Controller
VEM motors GmbH
Carl-Friedrich-Gauß-Straße 1
38855 Wernigerode

Telefon: +49 3943 68-0
Telefax: +49 3943 68-2120
E-Mail: motors@vem-group.com
Data Protection Officer
Dresdner Institut für Datenschutz
Hospitalstraße 4
01097 Dresden

Telefon: +49 351 655 772-0
Telefax: +449 351 655 772-22
E-Mail: zentrale@dids.de

 

Access to the website, logging and creation of log files

When you access our website, it is technically necessary for us to process your IP address and other access infor-mation for the duration of the session. In addition, the IP address and access information are logged and stored in the server log files. This includes your browser identification and domain, name of the retrieved file, date and time of retrieval, amount of data transmitted and the successful retrieval. Personal data is processed to make the web-site available (Art. 6 Para. 1 Sentence 1 lit. b) GDPR) and to ensure the security of our information technology systems (Art. 6 Para. 1 Sentence 1 lit. c) GDPR in conjunction with Art. 32 GDPR). The log files are anonymised after seven days, and anonymised data is also deleted every quarter following a statistical evaluation.

Use of cookies

We use cookies on our website. By means of a cookie, the information and offers on our website can be optimised in the interests of the user. Only essential cookies are used on our website on the basis of § 25 Para. 2 No. 2 TDDDG. Subsequent processing of personal data is based on our overriding legitimate interest in accordance with Art. 6 Para. 1 Sentence 1 lit. f) GDPR. Here, our legitimate interest is to ensure the technical functionality of the website ("PHPSESSID", retention period: till the end of the session). No information is transmitted to third parties.

Contact form

A contact form, which can be used for electronic contact, is available on our website. You may also contact us by email or telephone using the contact details provided in the legal notice. When you contact us, we process the personal data you provide, in particular your name, email address, telephone number and your message, in order to respond to your message. We process this personal data based on our legitimate interest in satisfactorily re-sponding to messages and enquiries in accordance with Art. 6 Para. 1 Sentence 1 lit. f) GDPR or, in the case of requests for quotations and contractual matters, on the basis of the contract or the pre-contractual measures in accordance with Art. 6 Para. 1 Sentence 1 lit. b) GDPR.

The personal data you provide will be treated confidentially by us, it will only be used to process your query and will not be passed on to third parties unless this is necessary in individual cases due to the nature of your query. Personal data is deleted after the final clarification of your query or if you object to its storage. The deletion peri-ods described here apply only if they are not in conflict with the legal retention periods.

Use of the customer login/electronic catalogue “VEMeKAT”

VEM Group customers are assigned user accounts to use the login area. The respective email addresses of author-ised users are processed for creating these user accounts. Passwords are set by the authorised users themselves. Furthermore, additional personal data, in particular personal master data and contact data, can be provided with-in the scope of the access. Personal data is processed on the basis of the owner and user relationship and the existing contractual relationship in accordance with Art. 6 (1) Sentence 1 lit. b GDPR. Personal data is deleted upon termination of the usage relationship and the associated deletion of the user account, insofar as this is not in con-flict with the stipulated legal retention periods.

The electronic catalogue "VEMeKAT" may be used without restriction via guest access. With freely-selectable user names and passwords we offer you the opportunity to create shopping baskets for rapid access to previous searches. You can delete the shopping carts later-on by yourself. Here again, data processing is carried out on the basis of the respective free usage relationship in accordance with Art. 6 (1) Sentence 1 lit. b GDPR.

Use of service providers for making the website available

To make the website available, we use a service provider who processes personal data on our behalf or whose access to personal data cannot be excluded. We have concluded a contract with this service provider for order processing in accordance with Art. 28 GDPR. The service provider is Host Europe GmbH (Hosting)..

Rights of data subjects and right of appeal

BData subjects may, at any time, request information about the personal data concerning them and, subject to legal requirements, assert the right to rectification, erasure, restriction of processing or data portability. Insofar as pro-cessing is supported by the legal basis of legitimate interest, data subjects also have the right to object. Further-more, should the data processing take place in accordance with the consent of the data subject, it is possible to revoke this at any time with effect for the future. To exercise your rights, please contact us using the contact de-tails above. In addition, in accordance with Art. 77 GDPR, each data subject has the right to lodge a complaint with a data protection supervisory authority, should they be of the opinion that the processing of their personal data is taking place unlawfully.

Data protection information about our presence on social networks

We maintain a presence on the social networks listed below in order to actively communicate with users and to provide information about our activities. In connection with the use of these social networks by users, we would like to point out that users' personal data may be processed by the operators of the social networks even outside the European Union and outside the European Economic Area. This can lead to potential risks for users, such as more difficult enforcement of data protection rights. However, we would also like to point out that personal data will only be transmitted if the requirements of Art. 44 ff. GDPR are met, in particular if an adequacy decision pur-suant to Art. 45 Para. 1 GDPR exists or standard data protection clauses pursuant to Art. 46 Para. 2 lit. c) GDPR can be concluded. Furthermore, agreements on joint responsibility are concluded in accordance with Art. 26 GDPR, provided that the operators of the social networks support this.

In addition, we wish to make clear that the personal data of the users is also generally processed by the operators of the social networks for their own market research and advertising purposes. Any use profiles which are gener-ated from the use behaviour can be used to display adverts which are tailored to the interests of the users, also outside of the social networks. For this purpose, cookies are generally placed on the computers of the user by the operators of the social networks, which means that information relating to the device, use behaviour and interests of the users can also be processed even if the user does not hold a profile in the respective network. Further in-formation in this respect and details concerning any rights of objection can be found in the data protection infor-mation and additional information provided by the respective operators of the social networks. We have provided links to these below

The following applies to the processing of personal data:

Processed data categories

The processed data categories include core data (for example name), contact data (for example email addresses), content data (for example text entries), use data (for example interest in content), as well as meta and communica-tion data (for example device information and IP addresses).

Purpose and legal basis of the processing

Data processing takes place for the purposes of information provision, communication and marketing, should this be subject to our responsibility. The operation of the social media presences takes place in line with a legitimate interest in accordance with Article 6 Paragraph 1 Sentence 1 Letter f) GDPR, whereby the respective interests are represented by the purposes referred to above.

Duration of saving

The categories of data processed by us are only saved within the respective social network. In most cases, we have no influence over the concrete duration of the saving, as this is determined by the providers of the social net-works. You can obtain information in this respect in the data protection information of the respective provider. Where the retention period can be influenced by us in individual cases, we will delete the data once the purpose for which it was processed has been fulfilled, taking into account any relevant legal retention obligations.

Services and service providers used by us and network-specific information

Below, we wish to inform you of the services and service providers used by us and to provide you with network-specific information, naming the respective responsible locations within and outside of the EU / EEA. No further data transfer is carried out by us.

Rights of data subjects and right of appeal

Data subjects may, at any time, request information about the personal data concerning them and, subject to legal requirements, assert the right to rectification, erasure, restriction of processing or data portability. Insofar as pro-cessing is supported by the legal basis of legitimate interest, data subjects also have the right to object. Further-more, should the data processing take place in accordance with the consent of the data subject, it is possible to revoke this at any time with effect for the future. To exercise your rights, please contact us using the contact de-tails above. In addition, in accordance with Art. 77 GDPR, each data subject has the right to lodge a complaint with a data protection supervisory authority, should they be of the opinion that the processing of their personal data is taking place unlawfully.

In relation to the claiming of rights of data subjects, we wish to point out that in order to obtain comprehensive measures, it is advisable to address such claims directly to the respective operator of the social network. Only the operators of the social networks have access to all of the personal data of the users which has been gathered and are able to provide comprehensive information and take any applicable measures accordingly. Should you require any assistance in this respect, it goes without saying that you can contact our data protection officer at any time.